Difference between revisions of "OFTP2 - John Deere"

From OS4X
Jump to navigation Jump to search
(Created page with "= Background = John Deere uses for its OFTP2 file exchange service different certificates for TLS and OFTP2 internal security (secure authentification, file encryption and fil...")
 
Line 2: Line 2:
 
John Deere uses for its OFTP2 file exchange service different certificates for TLS and OFTP2 internal security (secure authentification, file encryption and file signing). This way, you cannot use the easy-to-use-mechanism of downloading the certificate from the TLS server for all services. Starting with OS4X 2018-02-19, the following error message will appear when you try to do so:
 
John Deere uses for its OFTP2 file exchange service different certificates for TLS and OFTP2 internal security (secure authentification, file encryption and file signing). This way, you cannot use the easy-to-use-mechanism of downloading the certificate from the TLS server for all services. Starting with OS4X 2018-02-19, the following error message will appear when you try to do so:
  
[[]]
+
[[File:Google ChromeScreenSnapz468.png]]
 +
 
 +
= Identify the correct certificate =
 +
You must have received the certificate from John Deere via another medium, such as email. A known package is the file
 +
JOHNDEEREPARTNERPACKAGEOFT.zip
 +
Which contains the following files:
 +
John_Deere_new_certificate_04_04_2017.txt
 +
JohnDeere-Parameter.txt
 +
'''JohnDeere190419.cer'''
 +
ODETTE Root.cer
 +
ODETTESHA2IssuingCA.cer
 +
 
 +
The certificate file "JohnDeere190419.cer" is what you need, since this is the end-certificate of the whole chain.

Revision as of 12:26, 19 February 2018

Background

John Deere uses for its OFTP2 file exchange service different certificates for TLS and OFTP2 internal security (secure authentification, file encryption and file signing). This way, you cannot use the easy-to-use-mechanism of downloading the certificate from the TLS server for all services. Starting with OS4X 2018-02-19, the following error message will appear when you try to do so:

Google ChromeScreenSnapz468.png

Identify the correct certificate

You must have received the certificate from John Deere via another medium, such as email. A known package is the file

JOHNDEEREPARTNERPACKAGEOFT.zip

Which contains the following files:

John_Deere_new_certificate_04_04_2017.txt
JohnDeere-Parameter.txt
JohnDeere190419.cer
ODETTE Root.cer
ODETTESHA2IssuingCA.cer

The certificate file "JohnDeere190419.cer" is what you need, since this is the end-certificate of the whole chain.